> Markdown version of [/jobs/ext/4312655-senior-soc-analyst-l3](https://www.wearedevelopers.com/jobs/ext/4312655-senior-soc-analyst-l3). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior SOC Analyst (L3)

- **Company:** Vitaquest International LLC
- **Location:** North Caldwell, NJ, United States
- **Experience:** Expert
- **Salary:** $120,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, JIRA, Business Systems, Cloud Computing, Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Microsoft Security Essentials, Windows PowerShell, Azure Active Directory, Kusto Query Language, Microsoft Power Automate, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Microsoft Sentinel, Windows Security
- **Published:** October 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=704805e9327872ae

## About the Role

* Minimum 5 years of experience in Security Operations, Incident Response, Threat Detection, or Cyber Security.

Strong hands-on experience with:

 * Microsoft Sentinel
 * Microsoft Defender XDR
 * Kusto Query Language (KQL)
 * Incident Response
 * Threat Hunting
 * Detection Engineering
 * Security Monitoring and Alert Triage
 * Experience working within enterprise SOC environments.

Strong understanding of:

 * Microsoft 365 Security
 * Entra ID / Azure AD
 * Windows Security
 * Cloud Security Concepts
 * MITRE ATT&CK Framework
 * Experience working with Jira or similar ticketing and workflow management platforms.
 * Excellent analytical, communication, and stakeholder management skills.
 * Ability to work effectively across geographically distributed teams., * Microsoft certifications such as SC-200, SC-300, SC-100, or AZ-500.
 * Experience with PowerShell or Python automation.
 * Experience with SOAR platforms and Logic Apps.
 * Knowledge of threat intelligence platforms and cloud workload security., * enterprise SOC Environment: 5 years (Preferred)
 * Microsoft 365 Security: 5 years (Preferred)
 * Microsoft Sentinel: 5 years (Preferred)
 * Microsoft Defender XDR: 5 years (Preferred)

## Description

We are seeking an experienced Senior SOC Analyst (L3) to provide advanced incident response, threat hunting, detection engineering, and operational leadership across the CGS Security Operations Centre (SOC).

This role combines senior-level SOC operations with the onboarding and integration of new Operating Companies (OpCos) into the CGS SOC service. The successful candidate will act as a technical escalation point, drive continuous improvement of Microsoft security technologies, and support the standardisation of SOC processes across the organisation., * Security Operations & Incident Response

 * Lead complex cybersecurity incidents from identification through containment, eradication, recovery, and post-incident review.
 * Act as the primary escalation point for L1 and L2 SOC analysts.
 * Perform advanced threat hunting using Microsoft Defender XDR, Microsoft Sentinel, KQL, and other telemetry sources.
 * Conduct root cause analysis and recommend improvements to detection and response capabilities.
 * Produce clear incident reports, threat briefings, and stakeholder communications.
 * Support purple-team exercises, attack simulations, and MITRE ATT&CK-aligned threat modelling activities.
 * Detection Engineering & SOC Optimisation
 * Develop, tune, and maintain Sentinel analytics rules, workbooks, automation playbooks, and detection content.
 * Create and optimise KQL queries to improve threat detection and investigation efficiency.
 * Support automation initiatives using Logic Apps, SOAR workflows, PowerShell, and other tooling where appropriate.
 * Collaborate with infrastructure, cloud, and security teams to improve telemetry quality, log onboarding, and monitoring coverage.
 * Conduct quality reviews of SOC investigations, alert handling, and reporting processes.
 * SOC Onboarding & Service Integration
 * Support onboarding of new Operating Companies into the CGS SOC service.
 * Review onboarding questionnaires, use cases, detection requirements, and security monitoring objectives.
 * Coordinate with OpCo teams to migrate, test, deploy, and maintain Sentinel use cases and monitoring content.
 * Align alert classifications, severity mappings, escalation procedures, and SOC workflows across CGS and OpCo environments.
 * Present Defender monitoring capabilities and security recommendations for VIP accounts, critical assets, and key business systems.
 * Act as a primary point of contact during onboarding activities and provide ongoing support and guidance.
 * Deliver knowledge-transfer sessions and training to OpCo stakeholders and SOC personnel.